Re: [GNU-linux-libre] Developing free non-gnu operating systems

[David Hedlund]

On 2021-10-10 19:52, Denis 'GNUtoo' Carikli wrote:
> On Fri, 08 Oct 2021 20:42:25 -0300
> Matias Fonzo <selk@dragora.org> wrote:
>> Note, distributing under the xz format sucks![1].  Its competitor in 
>> quality offers not only a better license (adequate for free software 
>> projects), but is also better prepared for reproducibility[2].
>>
>> [1] http://lzip.nongnu.org/xz_inadequate.html
>> [2] http://lzip.nongnu.org/safety_of_the_lzip_format.html
> Thanks a lot!
>
> I've started reading these and they look really interesting.
>
> While modifying linux-libre for Replicant, I've noticed that with Linux
> releases, released tarball are compressed with xz, but that they didn't
> sign them. Instead they signed the uncompressed tarballs.
>
> At first I thought that it was to enable people to change the
> compression level, but now I also wonder if xz shortcoming also
> influenced that decision.
>
> Denis.
Thanks. I suggest that you mention this at
https://directory.fsf.org/wiki/Collection:Device_drivers_and_firmware